view_profiles_perms.module in View profiles permissions 7

Restricts viewing user profiles based on user roles

File

view_profiles_perms.module

<?php

/**
 * @file
 * Restricts viewing user profiles based on user roles
 */

/**
 * Implements hook_permission().
 *
 * Provide permissions per role to be viewed
 */
function view_profiles_perms_permission() {
  $perms = array();
  $roles = user_roles(TRUE);

  // remove authenticated role
  unset($roles[DRUPAL_AUTHENTICATED_RID]);
  if (count($roles) > 0) {
    foreach ($roles as $rid => $role_name) {
      $perms += view_profiles_perms_permission_name($role_name);
    }
  }
  return $perms;
}

/**
 * Helper function to build the permission name
 */
function view_profiles_perms_permission_name($role_name) {
  return array(
    "access {$role_name} profiles" => array(
      'title' => t("Access to %role_name profiles", array(
        '%role_name' => $role_name,
      )),
      'description' => t('Grant access to user profiles to this role'),
    ),
  );
}

/**
 * Implements hook_menu_alter().
 *
 * Takes over the access callback for user profiles.
 */
function view_profiles_perms_menu_alter(&$items) {
  $items['user/%user']['access callback'] = 'view_profiles_perms_access';
}

/**
 * Access callback for user profiles.
 */
function view_profiles_perms_access($account = NULL) {
  global $user;
  if (!isset($account)) {
    $account = $user;
  }

  // First check user module's access
  $access = user_view_access($account);
  if (!$access) {

    // Check our own permissions.
    foreach ($account->roles as $rid => $role_name) {

      // Annonymous and authenticated user roles get skipped
      if ($rid != DRUPAL_ANONYMOUS_RID && $rid != DRUPAL_AUTHENTICATED_RID) {
        $perm_name = view_profiles_perms_permission_name($role_name);
        if (!empty($perm_name)) {
          $perm_name = key($perm_name);
          $access = user_access($perm_name);
          if ($access === TRUE) {
            break;
          }
        }
      }
    }
  }
  return $access;
}

/**
 * Implements hook_entity_info_alter().
 */
function view_profiles_perms_entity_info_alter(&$entity_info) {
  if (module_exists('entity')) {

    // Override the user access callback if entity.module is installed.
    $entity_info['user']['access callback'] = 'view_profiles_perms_entity_metadata_user_access';
  }
}

/**
 * Implements hook_module_implements_alter().
 */
function view_profiles_perms_module_implements_alter(&$implementations, $hook) {
  if ($hook == 'entity_info_alter' && isset($implementations['view_profiles_perms'])) {

    // Make sure entity.module doesn't regain control of user access.
    $group = $implementations['view_profiles_perms'];
    unset($implementations['view_profiles_perms']);
    $implementations['view_profiles_perms'] = $group;
  }
}

/**
 * Access callback to override entity_metadata_user_access().
 */
function view_profiles_perms_entity_metadata_user_access($op, $entity = NULL, $account = NULL, $entity_type = NULL) {

  // First check entity.module's access callback.
  $access = entity_metadata_user_access($op, $entity, $account, $entity_type);
  if (!$access && $op == 'view') {

    // Override entity.module if it didn't grant view access already.
    $access = view_profiles_perms_access($entity);
  }
  return $access;
}

Functions

Name	Description
view_profiles_perms_access	Access callback for user profiles.
view_profiles_perms_entity_info_alter	Implements hook_entity_info_alter().
view_profiles_perms_entity_metadata_user_access	Access callback to override entity_metadata_user_access().
view_profiles_perms_menu_alter	Implements hook_menu_alter().
view_profiles_perms_module_implements_alter	Implements hook_module_implements_alter().
view_profiles_perms_permission	Implements hook_permission().
view_profiles_perms_permission_name	Helper function to build the permission name